Re: write pf rules for acces concentrator server (pppoe)

2008-03-05 Thread Siju George
On Mon, Mar 3, 2008 at 6:34 PM, Henning Brauer <[EMAIL PROTECTED]> wrote: > * Fratiman Vladut <[EMAIL PROTECTED]> [2008-03-01 23:16]: > > > since there is no ng interface on OpenBSD I assume you use some other > OS. which probably means you are doomed. On OpenBSD, you use interface > groups for

Re: write pf rules for acces concentrator server (pppoe)

2008-03-03 Thread Henning Brauer
* Fratiman Vladut <[EMAIL PROTECTED]> [2008-03-01 23:16]: > I have an pppoe server. How i can write pf rules for this situation, in > order to specify any interface, ng0, ng1, . > I see that isn't any possibility to use wildcard in macros, something like > this: ng_if="ng*". > Obviously isn'

Re: write pf rules for acces concentrator server (pppoe)

2008-03-02 Thread Stuart Henderson
On 2008-03-02, Fratiman Vladut <[EMAIL PROTECTED]> wrote: > Ng interface is an netgraph node (virtual interface), like tun or tap, > that is use by mpd4 daemon. > Mpd4 act as acces concentrator, in order to give access to internet > based on pppoe method. > I use freebsd as SO, with pf firewall.

Re: write pf rules for acces concentrator server (pppoe)

2008-03-02 Thread Fratiman Vladut
Ng interface is an netgraph node (virtual interface), like tun or tap, that is use by mpd4 daemon. Mpd4 act as acces concentrator, in order to give access to internet based on pppoe method. I use freebsd as SO, with pf firewall. This is why i post on OpenBSD mailing list, because is father of p

Re: write pf rules for acces concentrator server (pppoe)

2008-03-02 Thread Stuart Henderson
On 2008-03-02, Fratiman Vladut <[EMAIL PROTECTED]> wrote: > Thanks ! Work very well. Now, how can configure the system, in order to > make this changes, every time when boot. How cand add all ng interface, > to "ng" group at boot time? What is an "ng interface"?

Re: write pf rules for acces concentrator server (pppoe)

2008-03-02 Thread Fratiman Vladut
Thanks ! Work very well. Now, how can configure the system, in order to make this changes, every time when boot. How cand add all ng interface, to "ng" group at boot time? scott wrote: see ifconfig(4) and the "group group-name" keyword (also applicable to hostname.if). Substitute the the "grou

Re: write pf rules for acces concentrator server (pppoe)

2008-03-01 Thread scott
see ifconfig(4) and the "group group-name" keyword (also applicable to hostname.if). Substitute the the "group-name" for the interface name in the applicable pf rule. One group-name based rule covers off all the member interfaces. :-) -Original Message- From: Fratiman Vladut <[EMAIL PR